Skip to content

MAIP v2.1.0 — maintained integrations and reproducible verification

Latest

Choose a tag to compare

@Dividebyzero-gt Dividebyzero-gt released this 18 Oct 20:13

MAIP v2.1.0 — maintained integrations and reproducible verification

This is a release of the public MAIP source collection. It is not a new protocol wire version and does not change every package's version number. The eleven Python integration packages remain at their already-published 1.1.0 versions; the npm compatibility package @truthlocks/maip has its own version history.

Start without an account

git clone --branch v2.1.0 --depth 1 https://github.com/truthlocks/maip.git
cd maip
node examples/developer-validation/verify.mjs

Node 18+ runs five synthetic checks: a valid signed receipt and expected key/agent binding, changed action, altered signature, unrelated key, and substituted displayed identity. The Python walkthrough reproduces the same checks. No credentials or hosted writes are needed for this example.

Install a hosted integration

python -m pip install maip-ai-connectors==1.1.0
# Add the integration used by your application, for example:
python -m pip install truthlocks-langchain==1.1.0

Versioned integration guides cover Anthropic, AutoGen, Bedrock, CrewAI, LangChain, LlamaIndex, OpenAI, Delta Lake, DVC and MLflow. Register your own workspace and agent, and use matching sandbox credentials. Framework/provider credentials are separate.

Validation and downloads

  • 270 tests passed across the four Python integration suites: core connectors 94, Delta Lake 74, DVC 68, MLflow 34. Tests include local HTTP fixtures and local framework/storage behavior; provider accounts were not exercised live in this release pass.
  • All eleven integration README examples passed with network connections blocked (22 code blocks), including the thin provider/framework adapters.
  • Node and Python offline verification walkthroughs each passed all five checks.
  • The attached 22 wheel/source files are the exact already-published PyPI artifacts. Their SHA-256 values were checked against PyPI; Python wheel source matches this tag after line-ending normalization. SHA256SUMS covers the downloads.

Scope and migration

Use the maintained integrations/ clients and current hosted API documentation. The older reference/, verifier/, sdk/ and spec/ directories remain historical protocol material, not the current hosted API contract. The legacy Go modules compile but contain no test files; this release does not publish new legacy verifier binaries or claim their hosted compatibility.

A valid signature is not proof that the stated action happened. Current authorization, lifecycle state and transparency-log inclusion require separate checks. This source release is not an independent audit, production reliability claim, or completed end-to-end acceptance of all providers. Apache-2.0 applies to this public repository; the managed platform has separate terms.